Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-1981: avahi-daemon denial of service can be caused by unprivileged users via DBus
Fixed packages 23
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | avahi | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-autoipd | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-compat-howl | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-compat-howl-devel | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-compat-libdns_sd | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-compat-libdns_sd-devel | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-debuginfo | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-devel | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-dnsconfd | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-glib | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-glib-devel | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-gobject | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-gobject-devel | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-libs | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-qt3 | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-qt3-devel | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-qt4 | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-qt4-devel | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-tools | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-ui | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-ui-devel | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-ui-gtk3 | 0:0.6.31-20.amzn2.0.1 |
| Amazon Linux · 2 | avahi-ui-tools | 0:0.6.31-20.amzn2.0.1 |
Vulnerabilities 1
-
Medium 5.5
A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-1981.html